$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 8h1i/NKrahRRMKbQvz2fmlCms3Q5VTHfnt3WyZL6/EA= Subject key identifier: F4:72:19:E5:37:9A:49:28:28:56:73:93:56:18:88:B8:29:34:36:8B Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 097B Signing time: Fri 22 Nov 2024 19:52:43 +0000 Manifest this update: Fri 22 Nov 2024 19:52:42 +0000 Manifest next update: Fri 29 Nov 2024 19:52:42 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: YaFatWCID8n/N7t9G/K+A2w0/URZTsHLoRbzsB68LPw=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: 2nNnMwW7ScyaYHi8tlqpC8yOAW8NMr5phOvnAPCxu2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Nov 22 19:52:42 2024 GMT Not After : Nov 29 19:52:42 2024 GMT Subject: CN=6740e10b-3ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:e9:46:ff:4c:ba:41:36:d0:09:6e:06:23: 9a:3a:f1:76:01:17:f9:03:e1:96:99:c9:3e:19:39: e8:10:8e:cb:f0:c4:a3:e6:a8:39:b7:e6:2d:e7:a7: 65:96:33:52:21:29:18:06:59:a6:30:2d:cc:8e:8a: 47:f9:fe:78:d4:a9:05:c1:d9:21:d3:7c:77:55:a2: 34:dc:8e:43:cc:0c:ea:74:c3:93:09:c4:cf:aa:13: 4c:e2:7e:92:d0:d1:90:6d:7e:64:df:a1:a7:f3:af: ce:32:08:cb:ff:2b:02:9d:e8:14:e3:03:6b:cc:c0: 27:30:01:e0:34:93:21:ff:54:69:d3:5e:99:de:23: 19:c1:0c:28:dc:6d:d2:9b:1f:05:a6:aa:db:57:d7: 35:c1:68:b7:0e:e1:ca:92:76:34:57:e7:59:b0:7b: a7:6b:0a:61:00:e6:a3:79:e0:66:fc:91:5d:c7:f9: fe:ff:cd:79:9e:42:4e:a5:71:61:53:55:e2:d3:1e: d8:ff:f3:0a:5c:6b:da:5f:cf:07:61:ec:c5:e2:41: 73:ad:a8:43:83:ae:77:f4:4d:2b:a1:80:33:6a:17: ee:32:b1:dc:6d:8b:a1:5c:33:1a:21:2f:22:d4:36: 76:88:82:8c:55:ba:89:0d:cc:a5:25:71:8f:56:bc: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:19:E5:37:9A:49:28:28:56:73:93:56:18:88:B8:29:34:36:8B X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:90:b8:3d:51:d7:f3:39:9d:f9:09:6b:b8:02:3e:60:da:d1: e1:9e:f1:3d:ed:a8:6c:4a:34:05:4c:26:1f:01:a6:e9:7c:7e: 08:f2:34:ed:e8:32:7b:50:0a:ef:8f:b4:2f:15:98:f8:bb:bf: 31:ed:e1:a0:d8:b4:71:81:26:7f:32:86:2c:32:20:f3:50:19: ea:27:a4:5a:90:af:4b:f8:82:72:74:e1:98:f9:04:f7:ce:b8: 1a:0c:56:b3:02:18:11:88:9e:06:f3:9b:68:db:c7:76:31:b9: 98:3b:fd:80:18:72:d9:10:3f:f7:b0:d1:36:1d:f5:b7:5c:94: 2f:28:3b:d5:b6:da:a2:cb:6c:c0:a8:4b:f8:00:d5:66:d7:5c: 13:20:19:81:72:91:3e:44:39:36:be:e8:cb:17:31:e6:e3:37: b9:46:06:c2:80:36:02:65:bb:cf:55:39:27:5a:17:0b:7d:0b: bb:80:e5:4d:bd:75:66:eb:68:3c:f1:e2:89:d3:bb:69:fc:00: aa:5d:57:ee:00:c4:2d:f1:2b:cf:80:10:5a:80:80:b0:08:1e: 44:46:61:57:23:c1:3c:d7:06:8d:ca:27:a9:cd:a1:4f:34:7f: 24:1f:0c:5d:0a:ff:5f:bb:c2:de:8e:60:f9:fa:50:c5:4d:ef: 0c:b4:5f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjQxMTIyMTk1MjQyWhcNMjQxMTI5MTk1MjQyWjAYMRYwFAYD VQQDEw02NzQwZTEwYi0zZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37PpRv9MukE20AluBiOaOvF2ARf5A+GWmck+GTnoEI7L8MSj5qg5t+Yt56dl ljNSISkYBlmmMC3MjopH+f541KkFwdkh03x3VaI03I5DzAzqdMOTCcTPqhNM4n6S 0NGQbX5k36Gn86/OMgjL/ysCnegU4wNrzMAnMAHgNJMh/1Rp016Z3iMZwQwo3G3S mx8FpqrbV9c1wWi3DuHKknY0V+dZsHunawphAOajeeBm/JFdx/n+/815nkJOpXFh U1Xi0x7Y//MKXGvaX88HYezF4kFzrahDg6539E0roYAzahfuMrHcbYuhXDMaIS8i 1DZ2iIKMVbqJDcylJXGPVrwTeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRyGeU3 mkkoKFZzk1YYiLgpNDaLMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6kLg9UdfzOZ35CWu4Aj5g2tHhnvE97ahsSjQFTCYfAabpfH4I8jTt 6DJ7UArvj7QvFZj4u78x7eGg2LRxgSZ/MoYsMiDzUBnqJ6RakK9L+IJydOGY+QT3 zrgaDFazAhgRiJ4G85to28d2MbmYO/2AGHLZED/3sNE2HfW3XJQvKDvVttqiy2zA qEv4ANVm11wTIBmBcpE+RDk2vujLFzHm4ze5RgbCgDYCZbvPVTknWhcLfQu7gOVN vXVm62g88eKJ07tp/ACqXVfuAMQt8SvPgBBagICwCB5ERmFXI8E81waNyiepzaFP NH8kHwxdCv9fu8LejmD5+lDFTe8MtF8f -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org